We thought this would be fixed with https://github.com/pulumi/pulumi/pull/15334, but evidently there's still an issue here

Also another question, how are you setting the SSL certificate up? Are you using the

AZURE_CLIENT_CERTIFICATE_PATH

env variable or something else? And also would you be willing to send me the output of

openssl x509 -in cert.pem -noout -text

with

cert.pem

replaced by wherever you store your certificate? I'm mostly curious about signature and public key algorithms. Can be in a DM, redacting as much as you want.

I've been trying to reproduce the issue locally, but so far haven't managed

• We (A colleague of mine) have in the meanwhile found what the issue was: We had some incorrectly named variables,

AZURE_CERTIFICATE_*

instead of

AZURE_CLIENT_CERTIFICATE_*

. • The Azure SDK presumably switched away from the

ARM_*

variables, and eventually the change finally made its way into Pulumi 3.104.2.

The Azure SDK presumably switched away from the

ARM_*

variables, and eventually the change finally made its way into Pulumi 3.104.2.

Yes, this sounds very plausible. In Pulumi 3.104.2 we upgraded the gocloud.dev dependency, which also included upgrades for the Azure SDK. (We did the upgrade in 3.104.0, had to revert in 3.104.1, but realized we needed to fix it forward, so we upgraded again in 3.104.2)